bpexxh Privacy Policy

1. Who We Are

This Privacy Policy is issued by bpexxh (hereinafter "bpexxh", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at bpexxh.com and all associated subdomains, mobile interfaces, and progressive web applications (collectively, the "Platform").

bpexxh operates under an international gaming license and is committed to handling your personal data in accordance with the data protection obligations imposed by that license and applicable international best-practice standards. For the purposes of this Privacy Policy, bpexxh acts as the data controller in respect of all personal data collected directly from you through the Platform.

This Policy applies to all registered players, prospective players who browse the Platform without registering, and any individual who communicates with bpexxh through our support channels. By using the Platform or submitting personal data to us in any form, you acknowledge that you have read and understood this Privacy Policy.

2. Data We Collect

bpexxh collects personal data across several categories. The table below summarises what we collect and the primary reason for collection:

3. How We Collect Your Data

bpexxh collects your personal data through the following channels:

• Direct submission — Information you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection — Technical data such as IP addresses, device identifiers, and session activity logs collected automatically as you interact with the bpexxh Platform via cookies, web beacons, and server logs.
• Third-party payment providers — Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Allied Bank, SadaPay, and USDT TRC20 processing partners when you initiate a deposit or withdrawal.
• Identity verification partners — Where required to meet our KYC obligations, bpexxh may use regulated third-party identity verification services to cross-reference the documents you submit against official databases.
• Fraud prevention services — Risk signals and fraud indicators shared with bpexxh by regulated anti-fraud and AML service providers as part of our security infrastructure.

bpexxh does not purchase personal data from data brokers or any other commercial sources not listed above.

4. Lawful Basis for Processing

bpexxh relies on the following lawful bases for processing your personal data, consistent with international data protection best practice:

1. Contractual necessity — Processing required to create and maintain your bpexxh account, process transactions, and deliver the gaming and betting services you have requested. Without this processing, bpexxh cannot provide its services to you.
2. Legal obligation — Processing required to comply with bpexxh's obligations under its international gaming license, including KYC verification, anti-money laundering (AML) checks, age verification, and regulatory reporting.
3. Legitimate interests — Processing for fraud prevention, security monitoring, responsible gaming risk assessment, platform analytics, and service improvement, where such interests are not overridden by your fundamental rights.
4. Consent — Processing for direct marketing communications (email, SMS, push notifications) where you have explicitly opted in. You may withdraw consent at any time by updating your notification preferences within your bpexxh account settings or by contacting [email protected].

5. How We Use Your Data

The personal data collected by bpexxh is used exclusively for the purposes described in this Policy. Specific uses include:

• Creating, verifying, and maintaining your bpexxh player account.
• Processing deposits and withdrawals in PKR via your chosen payment method.
• Conducting KYC and AML checks as required under our gaming license obligations.
• Monitoring gaming activity to identify potential problem gambling behaviours and to administer responsible gaming tools such as deposit limits and self-exclusion.
• Detecting, investigating, and preventing fraud, money laundering, collusion, and other prohibited conduct as defined in our Terms & Conditions.
• Communicating with you about your account, transactions, security alerts, and platform updates.
• Sending promotional communications, bonus offers, and product updates where you have opted in to receive them.
• Improving the functionality, performance, and content of the bpexxh Platform through anonymised analytics and user behaviour data.
• Resolving disputes, responding to support requests, and maintaining records of customer service interactions.
• Fulfilling reporting obligations to our licensing authority and, where legally required, to law enforcement or regulatory agencies.

6. Sharing Your Data

bpexxh does not sell or rent your personal data to any third party. We share your data only in the following circumstances and only to the extent strictly necessary:

• Payment processors — JazzCash, EasyPaisa, HBL, UBL, Allied Bank, SadaPay, and USDT TRC20 gateway providers receive the transaction-level data required to process your deposits and withdrawals.
• Identity verification providers — Regulated KYC and AML service providers receive identity documents and biographic data to fulfil our verification obligations.
• Gaming software suppliers — Third-party game studios and live casino providers that power games on the bpexxh Platform receive anonymised session tokens to facilitate gameplay. They do not receive your full personal profile.
• Security and fraud prevention services — Risk management and cybersecurity partners receive technical data (IP addresses, device fingerprints) to identify and prevent fraudulent activity.
• Legal and regulatory authorities — bpexxh will disclose personal data to our licensing authority, law enforcement agencies, or courts where required to do so by applicable law, a valid court order, or a regulatory direction. We will notify you of such disclosures where legally permitted to do so.
• Business transfers — In the event of a merger, acquisition, or sale of all or substantially all of bpexxh's assets, player data may be transferred to the acquiring entity. You will be notified of any such transfer and any change in the Privacy Policy that results from it.

All third-party service providers engaged by bpexxh are subject to data processing agreements that require them to handle your data in accordance with applicable data protection standards and to use it only for the specific purposes for which it was shared.

7. Cookies & Tracking Technologies

The bpexxh Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. Cookies are small text files stored on your device when you visit the Platform. We use the following categories of cookies:

• Strictly necessary cookies — Essential for the Platform to function. They enable core features such as session authentication, account security, and shopping cart functionality (where applicable). These cookies cannot be disabled without rendering the Platform inoperable.
• Functional cookies — Remember your preferences such as language settings, preferred payment method display, and game lobby layout. These improve your experience but are not essential.
• Analytical cookies — Collect anonymised data about how visitors use the Platform, such as which pages are visited most frequently and where errors occur. This data helps bpexxh improve Platform performance and content quality.
• Security cookies — Detect and prevent fraudulent logins, bot activity, and session hijacking attempts. They form part of bpexxh's overall security infrastructure.

bpexxh does not use third-party advertising or behavioural tracking cookies. You can manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the bpexxh Platform.

8. Data Retention

bpexxh retains your personal data for as long as necessary to fulfil the purposes described in this Policy, including compliance with our legal, regulatory, and licensing obligations. Specific retention periods apply as follows:

• Account and identity data — Retained for a minimum of five (5) years from the date of account closure, in compliance with anti-money laundering record-keeping obligations under our gaming license.
• Transaction and financial records — Retained for a minimum of five (5) years from the date of each transaction, consistent with AML regulatory requirements.
• Gaming activity logs — Retained for a minimum of three (3) years from the date of each session, for dispute resolution and responsible gaming audit purposes.
• Support communications — Retained for two (2) years from the date of the last interaction, for quality assurance and dispute resolution.
• Marketing preference records — Retained for two (2) years from the date your consent was last recorded or updated, as evidence of opt-in status.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to you.

9. Your Privacy Rights

As a bpexxh player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 calendar days.

10. Children & Minors

The bpexxh Platform is strictly intended for adults aged 21 years and above. bpexxh does not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification is conducted as part of the KYC process for all registered players.

If bpexxh discovers or is notified that a registered account belongs to a person under the age of 21, we will:

• Immediately suspend the account and freeze any associated balance.
• Initiate a full review of all transactions made on the account.
• Permanently close the account and return any deposited funds to the originating payment method, subject to verification.
• Delete all personal data associated with the minor's account in accordance with our data retention obligations.

Parents and guardians are strongly encouraged to use internet filtering and parental control software to prevent minors from accessing the bpexxh Platform. If you believe a minor has registered on bpexxh, please contact us immediately at [email protected].

11. Security Measures

bpexxh implements a multi-layered security framework designed to protect your personal and financial data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and bpexxh servers.
• AES-256 encryption for sensitive data fields stored in our databases, including payment details and identity documents.
• Multi-factor authentication (MFA) available for all player accounts as an optional but strongly recommended security layer.
• Role-based access controls ensuring that bpexxh staff can only access the data necessary for their specific function. No employee has unrestricted access to the full player database.
• Intrusion detection and prevention systems (IDS/IPS) monitoring bpexxh's network infrastructure for suspicious activity around the clock.
• Regular independent security audits conducted by third-party cybersecurity specialists as required under our gaming license.
• Penetration testing performed periodically to identify and remediate vulnerabilities in the Platform's codebase and infrastructure.

While bpexxh takes all reasonable steps to secure your data, no digital system can guarantee absolute protection against all possible threats. In the event of a data breach that poses a risk to your rights, bpexxh will notify affected players without undue delay and take immediate remediation action.

12. Changes to This Privacy Policy

bpexxh reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or licensing requirements. The date of the most recent update is displayed at the top of this page.

Where changes are material — meaning they significantly affect how your data is collected, used, or shared — bpexxh will notify registered players via the email address associated with their account and will display a prominent notice on the Platform for a period of no less than fourteen (14) days prior to the changes taking effect.

Your continued use of the bpexxh Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should cease using the Platform and contact us to initiate account closure.

We encourage you to review this Privacy Policy periodically so that you remain informed about how bpexxh is protecting your information.

13. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or bpexxh's data handling practices, please contact our Data Protection team through the following channels:

• Email: [email protected] — use subject line "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 in English and Urdu via the bpexxh Platform

We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days. For complex data subject access requests, we may extend this period by a further 30 days where justified, and will inform you of any such extension.

If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the supervisory authority or regulatory body with jurisdiction over bpexxh's gaming license. Details of the relevant authority are available upon request from our support team.

This Privacy Policy was last reviewed and updated on 1 January 2026. bpexxh reserves all rights not expressly granted herein.